This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/xgUIIZBXlyU4UoekW4OdzZHEuio.roa File: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (raw, json) Hash identifier: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0= Subject key identifier: C6:05:08:21:90:57:97:25:38:52:87:A4:5B:83:9D:CD:91:C4:BA:2A Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA538F9EF41D5D2B5DEEBAF37630DCE Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/xgUIIZBXlyU4UoekW4OdzZHEuio.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 185.219.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:38:f9:ef:41:d5:d2:b5:de:eb:af:37:63:0d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c605082190579725385287a45b839dcd91c4ba2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:b1:b4:3e:a7:fc:32:0e:b1:33:9a:d7:a2: e7:52:ee:e2:03:6b:40:0b:ab:e9:56:4e:3d:60:ec: 39:b1:b6:59:fd:54:64:18:e7:5a:eb:cf:91:c3:fe: 87:dd:f3:65:75:62:f8:0d:d3:be:36:d4:bd:d9:1c: 19:01:c3:a0:49:76:3c:b0:d0:ab:9e:f8:a1:cb:b2: 8b:7f:d2:39:dc:99:d3:df:dd:c0:94:b0:1e:b3:b8: c9:3f:7e:89:c5:3a:51:8f:09:77:0c:64:5a:8d:53: a7:ac:84:3d:2b:b6:d1:a1:35:78:a3:66:39:97:3f: b4:14:ca:03:03:aa:12:73:37:0f:bc:cd:56:58:e6: d0:95:ae:81:cd:98:28:7d:88:11:82:7b:0e:71:89: 24:06:8a:69:e1:aa:ca:72:3b:48:bd:0a:37:9f:8d: 24:66:c6:bb:91:d8:6c:c2:e9:85:09:a8:04:0b:cd: 82:88:f0:69:e6:50:a3:89:dd:63:57:ed:4e:d5:7a: d3:8e:b5:ed:e5:a3:f4:cb:39:73:2c:f0:da:f1:85: 89:9b:db:eb:41:99:64:4d:53:9d:e2:cc:07:4a:c9: f0:b1:e6:b8:56:ca:18:50:6e:b3:6c:55:c5:30:e0: 83:ba:bd:d8:a0:a5:b5:82:98:e8:23:74:05:7e:2a: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:05:08:21:90:57:97:25:38:52:87:A4:5B:83:9D:CD:91:C4:BA:2A X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/xgUIIZBXlyU4UoekW4OdzZHEuio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.191.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:27:76:ba:de:e0:5d:02:c8:ee:7c:ff:ec:7e:74:e3:3f:95: 53:ee:4a:d6:32:fe:3d:e8:93:80:27:e4:ca:26:79:7c:e9:2c: e5:bb:9a:e7:76:b1:11:2f:ca:7f:b9:5e:d1:9a:cf:10:95:99: ff:65:0e:ca:ed:15:ee:4f:90:2b:21:1c:9d:66:3b:62:e9:5e: 67:49:fd:c9:88:ae:65:0e:b3:1f:7c:32:3f:68:1a:25:b3:33: d6:e1:ef:81:f3:cd:f7:09:68:4f:a9:34:8f:c2:63:42:25:a8: 14:d2:74:1f:e3:84:d8:f7:9e:20:76:af:02:ba:c4:09:3c:5c: 84:a7:6a:be:23:de:ee:7c:6e:cb:c1:81:e7:a2:7c:90:f4:72: 18:15:c5:8d:1d:8d:ac:df:19:84:68:15:9a:f1:b4:7e:5c:d7: 38:6e:b4:77:25:b9:13:b0:85:9f:c8:3c:9d:05:09:38:c6:b9: b9:a5:bc:70:90:3c:7d:cc:70:69:16:35:f4:98:d2:2e:e5:46: 31:4e:f9:98:27:73:1a:a8:91:de:61:f3:0a:34:ea:cc:56:a4: b8:87:43:76:82:e2:ef:8c:e8:22:f3:d8:ed:1b:38:53:f4:a5: 70:91:45:e3:69:85:c6:66:24:7e:06:3c:4e:8b:62:64:c2:6b: cc:7f:d6:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTj570HV0rXe6683Yw3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjA1MDgyMTkwNTc5NzI1Mzg1Mjg3YTQ1YjgzOWRjZDkxYzRiYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrGxtD6n/DIOsTOa16LnUu7iA2tA C6vpVk49YOw5sbZZ/VRkGOda68+Rw/6H3fNldWL4DdO+NtS92RwZAcOgSXY8sNCr nvihy7KLf9I53JnT393AlLAes7jJP36JxTpRjwl3DGRajVOnrIQ9K7bRoTV4o2Y5 lz+0FMoDA6oSczcPvM1WWObQla6BzZgofYgRgnsOcYkkBopp4arKcjtIvQo3n40k Zsa7kdhswumFCagEC82CiPBp5lCjid1jV+1O1XrTjrXt5aP0yzlzLPDa8YWJm9vr QZlkTVOd4swHSsnwsea4VsoYUG6zbFXFMOCDur3YoKW1gpjoI3QFfiq9vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMYFCCGQV5clOFKHpFuDnc2RxLoqMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEveGdVSUlaQlhseVU0VW9la1c0T2R6WkhFdWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudu/MA0G CSqGSIb3DQEBCwUAA4IBAQBLJ3a63uBdAsjufP/sfnTjP5VT7krWMv496JOAJ+TK Jnl86Szlu5rndrERL8p/uV7Rms8QlZn/ZQ7K7RXuT5ArIRydZjti6V5nSf3JiK5l DrMffDI/aBolszPW4e+B8833CWhPqTSPwmNCJagU0nQf44TY954gdq8CusQJPFyE p2q+I97ufG7LwYHnonyQ9HIYFcWNHY2s3xmEaBWa8bR+XNc4brR3JbkTsIWfyDyd BQk4xrm5pbxwkDx9zHBpFjX0mNIu5UYxTvmYJ3MaqJHeYfMKNOrMVqS4h0N2guLv jOgi89jtGzhT9KVwkUXjaYXGZiR+BjxOi2JkwmvMf9a1 -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:41 2026 by rpki-client